Get real-time updates on Telegram
CVE-2025-38716: linux kernel before 6.6.103 (exclusive), from 6.7 (inclusive), before 6.12.43 (exclusive), from 6.13 (inclusive)…
CVE-2025-38716. CVSS 3.1 base score 5.5 (MEDIUM, NVD). EPSS 0.00148 (percentile 0.03637), scored 19-Oct-2026.
Affected technology
linux kernel · before 6.6.103 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.12.43 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.15.11 (exclusive)
linux
linux kernel · from 6.16 (inclusive), before 6.16.2 (exclusive)
linux
Linux · 434a964daa14b9db083ce20404a4a2add54d037a to before 4f032979b63ad52e08aadf0faeac34ed35133ec0, 434a964daa14b9db083ce20404a4a2add54d037a to before 5d8b249527362e0ccafcaf76b3bec2a0d2aa1498, 434a964daa14b9db083ce20404a4a2add54d037a to before b918c17a1934ac6309b0083f41d4e9d8fb3bb46c, 434a964daa14b9db083ce20404a4a2add54d037a to before 6e20e10064fdc43231636fca519c15c013a8e3d6, 434a964daa14b9db083ce20404a4a2add54d037a to before 736a0516a16268995f4898eded49bfef077af709, 3db7e32f7521df6f9b64a9b04abb00dd11ca5735, 34456bfafc2743a19eb148d56502f9a8c0dc6fcc, 9d6b8fa025237243e1782c358c83f20062d39fbe, 70f2545d9e75f9d8ed4bfe0a6efa232abd88806e, 9f0f2bb728f4e87568f89a5603f7d3b76ef6a3b9, 2.6.27.60 to before 2.6.28, 2.6.32.51 to before 2.6.33, 2.6.34.14 to before 2.6.35, 3.0.14 to before 3.1, 3.1.6 to before 3.2
Linux
Linux · 3.2
Linux
Component: Not specified by the source
File: fs/hfs/bfind.c, fs/hfs/btree.c, fs/hfs/extent.c, fs/hfs/hfs_fs.h
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
- CWE
- CWE-476
- CCR priority
- 22.0 /100 (P4)
- CVSS 3.1
- 5.5 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · NVD
- EPSS
- 0.00148 · percentile 0.03637 · 2026-10-19
- KEV
- no
Provenance
- NVD CVE API 2.0 · Source record · observed 2026-10-20 01:44:01.123206+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2025-38716.html